zorgkaartnederland.nl

.nl crawl

First seen 2026-05-14 · Last seen 2026-05-19 · ok HTTP/1.1 200 3897 ms crawled 2026-05-19

US · 104.26.7.84 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: ZorgkaartNederland
Description: Vind een zorgaanbieder in Nederland, bekijk de adresgegevens, lees de waarderingen van anderen en laat ook uw mening achter.
Language: nl
Canonical: https://www.zorgkaartnederland.nl/

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (2)

static.cloudflareinsights.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Registrar.eu

Created

2009-07-29

Updated

2025-08-18

Name servers

irena.ns.cloudflare.com
dimitris.ns.cloudflare.com

DNS records live

NS

dimitris.ns.cloudflare.com
irena.ns.cloudflare.com

MX

10 zorgkaartnederland-nl.mail.protection.outlook.com
100 mail.zorgkaartnederland.nl

TXT

80276ad130c65cbb669f2d7b9022309763a02fcfdaad5b48061f3cd20796051e

Verified for

Brevo
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com ip4:136.144.214.206 ip4:136.144.204.174 ip4:194.88.2.0/24 ip4:37.97.206.231 ip4:145.131.32.97 ip4:145.131.7.98 ip4:37.252.124.149 include:rnmk.com ~all

softfail (~all)

DMARC

v=DMARC1;p=reject;pct=100;ruf=mailto:noreply@zorgkaartnederland.nl;ri=86400;aspf=r;fo=1;

policy: reject (enforced)

DKIM

mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

WE1

from 2026-04-01 to 2026-06-30

Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.zorgkaartnederland.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' www.gravatar.com img.youtube.com pbs.twimg.com *.vimeocdn.com data: blob: *.s3.eu-central-1.amazonaws.com *.google-analytics.com www.googletagmanager.com optimize.google.com *.readspeaker.com maps.google.com maps.gstatic.com *.googleapis.com *.ggpht.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com www.googletagmanager.com www.googleanalytics.com www.google-analytics.com www.googleoptimize.com optimize.google.com maps.googleapis.com *.readspeaker.com maps.google.com www.conceptcrafters.nl static.cloudflareinsights.com; connect-src 'self' *.google-analytics.com *.readspeaker.com maps.googleapis.com vimeo.com cloudflareinsights.com; style-src 'self' optimize.google.com fonts.googleapis.com 'unsafe-inline' *.readspeaker.com; font-src 'self' fonts.gstatic.com *.readspeaker.com data:; frame-src 'self' optimize.google.com *.readspeaker.com *.zorgkaartnederland.nl www.youtube-nocookie.com www.youtube.com playe
strict-transport-security: max-age=31536000